[openssl/openssl] 296ce3: CMS: Guard against int overflow in cms_kek_cipher()

"'Daniel Kubec' via openssl-commits" <[email protected]> Wed, 29 Jul 2026 09:57:35 -0700

Newsgroups	gmane.comp.encryption.openssl.cvs
Message-ID	<openssl/openssl/push/refs/heads/openssl-4.0/[email protected]>

  Branch: refs/heads/openssl-4.0
  Home:   https://github.com/openssl/openssl
  Commit: 296ce305784935f31031fcc81af1587aaf9d0662
      https://github.com/openssl/openssl/commit/296ce305784935f31031fcc81af1587aaf9d0662
  Author: Daniel Kubec <[email protected]>
  Date:   2026-07-29 (Wed, 29 Jul 2026)

  Changed paths:
    M crypto/cms/cms_kemri.c

  Log Message:
  -----------
  CMS: Guard against int overflow in cms_kek_cipher()

Mirror the check from cms_kari.c in cms_kemri.c.

Reviewed-by: Jakub Zelenka <[email protected]>
Reviewed-by: Paul Dale <[email protected]>
MergeDate: Wed Jul 29 16:56:18 2026
(Merged from https://github.com/openssl/openssl/pull/32072)

(cherry picked from commit 14149949d5c13c12c92a17f1a9eb943a003d0f43)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-4.0/b8d71a-296ce3%40github.com.